RDQ427R268

While candidates in the listed locations are encouraged for this role, we are open to remote candidates in other locations.

At Databricks, we are passionate about enabling data teams to solve the world's toughest problems, from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers and driven by customer obsession, we leap at every opportunity to tackle technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started.

Customers trust Databricks with their most sensitive data and workloads, and Security Infrastructure Operations (SIO) is the team that sustains and improves Databricks' cloud security posture across every cloud service provider we operate in. We are looking for a Senior Engineering Manager to lead this team and drive the strategy for how cloud identity, access, and environment changes are reviewed, executed, and automated at scale. You will own the operational backbone of Databricks' cloud security, spanning IAM policy enforcement, CSP account provisioning, compliance evidence collection, and security data pipelines. Your goal is to ensure that Databricks engineers can move fast without compromising security. This is a high-visibility, cross-functional leadership role that partners with Security, Security Engineering, IT and engineering teams across the company.

The impact you will have:

• Build, lead, and grow a high-performing team of engineers responsible for cloud IAM operations, CSP environment management, security data pipelines, and compliance operations across AWS, Azure, and GCP.
• Define and execute the strategy and roadmap for automating cloud access assignment, approval workflows, and IAM policy enforcement to reduce manual toil while strengthening security controls.
• Own the end-to-end lifecycle of CSP account, subscription, and project provisioning, including secure onboarding of acquired companies' cloud environments into Databricks' organizations with minimal disruption.
• Drive compliance programs including Cloud User Access Reviews, audit evidence collection, and IAM policy alignment to meet SOC2, FedRAMP, and other regulatory requirements.
• Ensure the reliability and timeliness of security data pipelines that ingest CSP audit logging, enabling downstream detection and response capabilities.
• Partner closely with Security, Security Engineering, and IT to interpret and operationalize security policies, ensuring consistent enforcement with high transparency and minimal friction for engineering teams.
• Lead complex, multi-quarter initiatives spanning multiple teams and external partners, demonstrating leverage by executing through technical leads and developing future leaders on the team.
• Lead GovCloud escort operations, including staffing a 24x7 on-call rotation for SEV0 incidents, and continuously improving operational resilience.
  
  

What we look for:

• 8+ years of experience in security engineering, cloud infrastructure, or production/site reliability engineering, with deep hands-on expertise in at least one major cloud provider (AWS, Azure, or GCP).
• 5+ years of engineering management experience, including building teams, developing senior engineers and managers, and navigating complex people situations such as promotions and performance management.
• Strong technical understanding of cloud IAM (policies, principals, roles, federation), CSP organizational structures, and identity governance frameworks.
• Demonstrated success leading operational teams that balance high-throughput request execution with automation and process improvement.
• Experience with compliance and audit workflows (SOC2, FedRAMP, ISO, or similar), including evidence collection and access review programs.
• Track record of driving cross-functional initiatives that require influencing without direct authority across security, infrastructure, and engineering organizations.
• Strong communication and stakeholder management skills, with the ability to translate security policy into practical operational processes that engineering teams can follow.
• BS (or higher) in Computer Science, Information Security, or a related technical field.
•